Wireshark localhost traffic capture

networking localhost wireshark packet-capture packet-sniffers
Udara S.S Liyanage picture Udara S.S Liyanage · May 1, 2011 · Viewed 161.4k times · Source

I wrote a simple server app in C which runs on localhost. How to capture localhost traffic using Wireshark?

Answer

cnicutar picture cnicutar · May 1, 2011

If you're using Windows it's not possible - read below. You can use the local address of your machine instead and then you'll be able to capture stuff. See CaptureSetup/Loopback.

Summary: you can capture on the loopback interface on Linux, on various BSDs including Mac OS X, and on Digital/Tru64 UNIX, and you might be able to do it on Irix and AIX, but you definitely cannot do so on Solaris, HP-UX....

Although the page mentions that this is not possible on Windows using Wireshark alone, you can actually record it using a workaround as mentioned in a different answer.

EDIT: Some 3 years later, this answer is no longer completely correct. The linked page contains instructions for capturing on the loopback interface.

Related questions

Accessing a local website from another computer inside the local network in IIS 7

Ok, so here is the scenario: I have computer A inside my local network running IIS 7. I added a new website, let's say samplesite.local, through IIS Manager, and edited the hosts file inside %systemroot%\system32\drivers\etc\ with this …

Read More
What is the difference between 127.0.0.1 and localhost

Assuming the following is defined in .../hosts: 127.0.0.1 localhost What, if any, are the actual differences between using 127.0.0.1 and localhost as the server name, especially when hitting processes running locally that are listening for connections?

Read More
Why connection to localhost is refused?

I have a server, to which a client machine connects. Recently I decided to encrypt the connection with stunnel, so now client program connects not directly to the server, but to localhost:8045 (I checked, and this port is not occupied). …

Read More